If there was a 'system' solution it would come via Logos 7 at the earliest, and with Windows "Controlled Folder Access"; which now seems to have been withdrawn (try typing that in the Find box of Start > Settings). That leaves my suggestion, above.